Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sNOOfqc9knZfwbGuSMBKS58ZsyY.roa
File: sNOOfqc9knZfwbGuSMBKS58ZsyY.roa (raw, json)
Hash identifier: QbaKXxcB2OmMFgoL/K3TLIPkFkqx4JiG49NPrluLc6w=
Subject key identifier: B0:D3:8E:7E:A7:3D:92:76:5F:C1:B1:AE:48:C0:4A:4B:9F:19:B3:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189341D20AA48DF9A0CE2E84E167709DED6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sNOOfqc9knZfwbGuSMBKS58ZsyY.roa
Signing time: Sat 08 Jul 2023 06:07:51 +0000
ROA not before: Sat 08 Jul 2023 06:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 20:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:1d:20:aa:48:df:9a:0c:e2:e8:4e:16:77:09:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 8 06:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d38e7ea73d92765fc1b1ae48c04a4b9f19b326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:68:be:57:3b:12:bd:51:d8:4e:67:db:0f:
8a:0e:ee:dc:7d:26:94:a7:7f:dc:1c:64:7e:d8:6a:
76:ba:b4:10:59:dc:91:11:1a:2e:5d:21:67:6f:6f:
86:8e:98:1e:e2:2b:cf:b8:c9:8f:95:31:0d:30:9f:
3c:6b:22:2c:8e:0d:a2:33:4e:b4:ed:1e:7c:4d:36:
47:3f:60:70:a3:a5:99:18:32:41:31:fc:0f:d1:f6:
5d:f9:c3:32:1a:64:ae:26:95:58:08:2c:f3:4e:3d:
93:31:3d:74:b8:aa:a7:e0:4b:44:b7:63:b5:20:31:
2d:94:93:23:e6:fc:7b:5a:c1:70:71:14:c4:af:5d:
38:cd:86:2a:85:c5:0a:66:13:83:37:59:90:6d:91:
a2:e1:8d:4a:88:ed:d7:c9:e5:f6:68:87:cb:9c:6e:
b3:27:4e:d4:71:5e:b7:fb:7c:5d:2a:c3:2a:a8:75:
22:fb:af:32:67:0b:fd:94:71:d9:5d:f0:6f:89:a5:
83:8d:a4:03:e0:35:07:aa:51:b3:4e:7d:d5:49:d2:
a7:70:59:92:5a:d8:7a:9a:a0:03:d3:ca:f7:4f:d5:
f1:dd:90:19:1d:cb:d1:71:c7:01:1e:3e:ca:3a:ec:
72:06:68:31:da:e6:82:6e:b5:f2:3c:13:ca:07:7b:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:8E:7E:A7:3D:92:76:5F:C1:B1:AE:48:C0:4A:4B:9F:19:B3:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sNOOfqc9knZfwbGuSMBKS58ZsyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.3.0/24
193.124.16.0/24
193.124.80.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.30.0/24
195.133.35.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
98:49:f6:dc:9f:cf:3f:47:8f:08:b5:1f:b3:78:5a:45:c4:de:
28:60:a3:58:55:ac:fa:67:66:68:7a:73:40:f9:c8:9f:45:bb:
97:bd:55:bf:30:d0:06:a1:57:dd:41:43:57:a6:5b:3c:54:47:
ec:d9:46:31:73:4c:31:f4:58:db:70:e8:88:1b:56:fb:e4:79:
95:0d:76:a0:42:ee:ca:11:54:cc:02:29:5d:b3:29:9c:e8:44:
ff:02:40:f4:bc:45:57:4c:d4:f7:e3:92:d3:e8:6a:8c:04:2d:
29:75:54:72:5d:89:e8:06:cf:fa:f4:22:71:02:89:7f:bd:49:
20:94:03:57:23:74:b4:4e:e6:2c:d4:e9:6f:89:92:6f:48:52:
66:78:da:42:7c:8a:2e:e7:f3:ac:8b:0a:99:5d:31:2c:34:2e:
90:d4:35:41:c5:b6:24:b1:a8:ff:b3:1d:0c:04:f3:32:2b:a8:
9e:60:63:41:0d:78:8b:98:1e:84:43:61:34:57:02:b7:6d:ae:
b7:e0:b0:2a:14:89:b7:e6:15:fe:fa:1c:15:b7:3a:0d:f0:ea:
5f:7a:59:f3:ce:df:1b:67:43:f5:2f:68:e9:61:4a:a6:fb:e6:
50:6d:3f:62:26:04:d2:03:62:bd:fc:65:0a:95:5e:28:3f:96:
1b:70:35:3d
-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgISAYk0HSCqSN+aDOLoThZ3Cd7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzA4MDYwNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGQzOGU3ZWE3M2Q5Mjc2NWZjMWIxYWU0OGMwNGE0YjlmMTliMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQdovlc7Er1R2E5n2w+KDu7cfSaU
p3/cHGR+2Gp2urQQWdyRERouXSFnb2+Gjpge4ivPuMmPlTENMJ88ayIsjg2iM060
7R58TTZHP2Bwo6WZGDJBMfwP0fZd+cMyGmSuJpVYCCzzTj2TMT10uKqn4EtEt2O1
IDEtlJMj5vx7WsFwcRTEr104zYYqhcUKZhODN1mQbZGi4Y1KiO3XyeX2aIfLnG6z
J07UcV63+3xdKsMqqHUi+68yZwv9lHHZXfBviaWDjaQD4DUHqlGzTn3VSdKncFmS
Wth6mqAD08r3T9Xx3ZAZHcvRcccBHj7KOuxyBmgx2uaCbrXyPBPKB3tDGQIDAQAB
o4IDmzCCA5cwHQYDVR0OBBYEFLDTjn6nPZJ2X8GxrkjASkufGbMmMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvc05PT2ZxYzlrblpmd2JHdVNNQktTNThac3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBrwYIKwYBBQUHAQcBAf8EggGeMIIBmjCCAZYEAgABMIIB
jgMEAD5M4QMEAT5M5gMEAMB8sgMEAMB8tQMEAMB8vQMEAMB8vwMEAMF8AwMEAMF8
EAMEAMF8UAMEAMF8fAMEAMF8hQMEAMF8yAMEAMF8zAMEAMI6KgMEAMI6LwMEAMI6
3wMEAMJXAQMEAMJXAwMEAMJXBzAMAwQAwlcLAwQAwlcMAwQAwlcQAwQAwlcSMAwD
BADCVxcDBALCVxgDBAHCVyQDBADCVysDBADCVzgDBADCV0kDBADCV04DBADCV1MD
BAHCV3IDBADCV3oDBADCV3wDBAHCV4IwDAMEAMJXhQMEA8JXgAMEAMJXoAMEAMJX
ogMEAMJXpgMEAMJXqAMEAMJXrAMEAMJXsQMEAMJXswMEAMJXuwMEAMJXvgMEAMJX
yAMEAMJXzAMEAMJX3gMEAMJX8AMEAMKHGAMEAMM6JAMEAMM6NgMEAcM6OgMEAcM6
PgMEAMOFHgMEAMOFIwMEAcOFVAMEAcOFwgMEANTACAMEANTACgMEANTA8QMEANTA
9DAMAwQA1MD3AwQC1MD4MA0GCSqGSIb3DQEBCwUAA4IBAQCYSfbcn88/R48ItR+z
eFpFxN4oYKNYVaz6Z2ZoenNA+cifRbuXvVW/MNAGoVfdQUNXpls8VEfs2UYxc0wx
9FjbcOiIG1b75HmVDXagQu7KEVTMAildsymc6ET/AkD0vEVXTNT345LT6GqMBC0p
dVRyXYnoBs/69CJxAol/vUkglANXI3S0TuYs1OlviZJvSFJmeNpCfIou5/OsiwqZ
XTEsNC6Q1DVBxbYksaj/sx0MBPMyK6ieYGNBDXiLmB6EQ2E0VwK3ba634LAqFIm3
5hX++hwVtzoN8Opfelnzzt8bZ0P1L2jpYUqm++ZQbT9iJgTSA2K9/GUKlV4oP5Yb
cDU9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org